Borrowing it
Nothing to install: this file belongs to reloru/new-relo. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/reloru/new-relo/main/CLAUDE.mdgit clone --depth 1 https://github.com/reloru/new-reloWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/reloru/new-relo/claude-md)<a href="https://agentmods.dev/instructions/reloru/new-relo/claude-md"><img src="https://agentmods.dev/badge/instructions/reloru/new-relo/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/reloru/new-relo/claude-md"><img src="https://agentmods.dev/badge/instructions/reloru/new-relo/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.07973 | $0.07973 |
| Opus 5.5 | $0.03189 | $0.03189 |
| Sonnet 5.5 | $0.01595 | $0.01595 |
| Haiku 4.5 | $0.00797 | $0.00797 |
Grade C, and why
new-relo CLAUDE.md scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Recursive force deletehighDestructive command
rm -rf with a variable or a broad path is one typo away from removing the wrong tree.
local run warmed, however many days ago. `rm -rf .wrangler/state` for a Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- After deploying, verify against the live site with `curl` (deploys land in How it starts
The opening of the file, as written. The whole thing — 458 lines — stays where its author put it; the contents beside it link to each section on GitHub.
crosbynews.com — Cloudflare Worker
Working with this repo
- This is a live, complete, self-maintaining production site. Make targeted changes only — don't rebuild it.
- After deploying, verify against the live site with
curl(deploys land in ~10–40s) — check the headers/routes you touched. Sample more than once: a new Worker version reaches Cloudflare's edges over a minute or two, so a single curl can return the OLD page from a colo that has not rolled over yet (CLAUDE_NOTES.mdhas the full propagation gotcha + sampling script). - Keep this file current: when you change a route, a behavior, or an invariant that lives outside the Worker, update CLAUDE.md in the same PR.
- Where state lives, by kind:
docs/pages/<page>.md(one file per content page — handler, content, data source, canonical URL, sitemap presence, meta, CSP) anddocs/endpoints/(same, for non-page routes) — a PR that changes any of that MUST update the matching file in the same PR.docs/ops/<topic>.mdis the same rule for cross-cutting operational config that isn't a page or endpoint (CI, GitHub settings, domain/DNS, MCP registry, email auth, news pipeline). All three record current expected state, not history — overwrite them, don't append. Dated write-ups go indocs/audit/ordocs/investigations/instead, and are never edited in place.CLAUDE_NOTES.md(repo root) is a current-state catch-all for anything that doesn't fit those categories.docs/README.mdexplains the full split.
Agent operating notes (process, not site mechanics)
Not about the Worker's behavior — about working this repo session-to-session
as a coding agent. A human reading for site behavior can skip this section.
Narrower tooling trivia (exact gh install steps, curl/JSON gotchas) lives in
CLAUDE_NOTES.md, not here — this keeps only the rules that apply regardless
of tooling specifics.
TaskList/TaskCreatedo NOT persist across sessions. The persistent backlog is GitHub Issues — queryable/writable viamcp__github__*(list_issues,issue_write, …). Prefer filing backlog items as Issues (labeledbacklog) over encoding them into a trigger prompt or CLAUDE.md.- Verify a new external upstream before writing any feature code against
it. A sandbox/container
curlsucceeding is not sufficient proof — Google News answers fine from a container but 503s the deployed Worker's IPs (why the news pipeline runs out-of-band; seedocs/ops/news-pipeline.md). Pattern used for NHC/EPA/Open-Meteo: add a temporary/debug-<name>-canaryroute,npx wrangler deployit for real (notwrangler dev— must be the actual edge runtime + egress IPs), curl the live URL for a real 200 + body, thengit restoreand redeploy clean before building on it. - A check that reuses the code under test cannot falsify it. A 2026-08-05 audit wrongly concluded HHD had stopped publishing pollen counts because it probed for "missing" days by GENERATING candidate URLs from the same date pattern the parser uses — inheriting the exact bug it existed to find. When checking whether a parser is missing data, extract what the upstream actually serves with a deliberately looser pattern and diff against our parse — never re-derive the expected input from our own logic.
AskUserQuestioncan fail silently in automated/routine-driven sessions (no human available to answer synchronously). When genuinely blocked on a decision only the user can make, don't retry the tool — lay out the tradeoffs in your response text and end the turn.- A backgrounded command's trailing cleanup fires against a file it has
never seen. Mutation-checking a test by editing a source file and restoring
it in a trailing
cp /tmp/x.bak src/...is safe only while the command runs to completion in the foreground. On 2026-08-25 one such check hung on a deliberately pathological ReDoS input, the harness moved it to the background, and it fired its restore minutes later over a file that had since gained two merged PRs' worth of work — reverting 163 lines ofsrc/features/tropics.jsinto an unrelated commit and to production.git statuswas clean because the overwrite landed beforegit add -A, so nothing looked wrong; the diff stat was the only tell. Restore from git, not a/tmpcopy (git checkout -- <file>), and readgit show --stat HEADbefore pushing a commit that touched several files. .claude/skills/*/SKILL.mdfiles drift independently of CLAUDE.md — nothing forces them to be touched when a feature ships (/kv's SKILL.md once went two feature-cycles describing three keys after a fourth shipped). When a change touches something a skill describes, grep the skills directory too, not just this file.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +2 lines · +47 tokens per session 5193e2696d79
- 16d ago Changed · +23 lines · +432 tokens per session f0b4e54fe5b9
- 1mo ago Changed · +11 lines · +235 tokens per session ef863bafd29f
- 1mo ago Changed · +7 lines · +150 tokens per session 9638ff1b9d1d
- 1mo ago Changed · +4 lines · +76 tokens per session 702f8bc87e68
- 1mo ago Changed · +3 lines · +57 tokens per session 20159074f7e1
- 1mo ago Changed · +9 lines · +184 tokens per session d7115be269d4
- 1mo ago Changed · +14 lines · +265 tokens per session 02bc5849be76
- 2mo ago First seen · 385 lines · 6,527 tokens per session scan C 88d189f9dd1e
new-relo CLAUDE.md is an instructions file published in the GitHub repository reloru/new-relo (1 stars, last pushed 7d ago), licensed MIT. It adds 7,973 tokens to every session, about $0.0319 per session on Opus 5.5. A static security scan graded it C with 2 findings (recursive force delete, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
plan-forge naming.instructions.md
Azure naming conventions — Microsoft CAF abbreviations, constraints, uniqueness, tagging.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).